$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59001b55-5091-483a-a901-52571f4aefb7.roa File: 59001b55-5091-483a-a901-52571f4aefb7.roa (raw, json) Hash identifier: KRXzXh3UpT2wy+6KFOz26YCeIWxhwINm3kHquz0yHhg= Subject key identifier: 8C:9E:99:78:61:E7:44:A2:B6:D1:2C:77:62:D2:F7:51:5E:24:06:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0560737BA91FA5EDCCB75E731EAB05E2DC131C9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59001b55-5091-483a-a901-52571f4aefb7.roa Signing time: Sat 18 Oct 2025 18:03:56 +0000 ROA not before: Sat 18 Oct 2025 18:03:56 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:60:73:7b:a9:1f:a5:ed:cc:b7:5e:73:1e:ab:05:e2:dc:13:1c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:03:56 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=16040a15fc62adc56341d8114c60c52573e0b12514b5d8453f00173e82e26d81, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:19:9c:83:35:b7:76:d5:8e:a5:e7:42:50: 77:11:e1:dd:be:bd:a8:b2:7c:0a:95:d6:f2:cd:aa: 4b:4b:77:a6:fd:1c:66:25:44:55:f5:9d:e1:3b:1b: f3:b0:7c:3e:58:fe:21:32:2b:d6:f6:37:c2:ec:33: a7:41:95:be:46:b3:fb:16:6e:e6:20:5c:90:67:7e: c5:5b:67:b3:ba:7a:20:6e:71:8f:af:37:b6:04:ea: 54:91:6c:17:c2:b0:f1:5d:a0:11:f5:6f:17:cf:19: 4f:90:36:77:79:56:9f:16:dc:97:fd:4d:cc:27:0f: 04:43:f4:ad:70:6f:64:d1:71:2e:80:5b:f0:ec:b5: 9a:54:d4:a4:f0:59:f0:af:0b:1c:61:44:61:9b:8a: a8:e8:f6:b9:3b:a6:3a:40:38:fc:f5:97:08:dc:81: cd:0a:71:41:22:29:ae:f1:f8:27:b6:d4:63:3c:6a: af:43:59:15:89:d9:e9:ce:9a:fd:f3:b5:6d:c5:34: 6d:89:44:c0:2f:92:b7:74:f1:4b:62:68:b3:a4:f0: 82:89:cb:24:d2:82:fb:65:ac:ce:90:5c:80:01:bd: 02:68:a9:82:b0:e9:d8:89:61:86:a2:01:f0:87:d9: 32:c0:8c:6a:11:73:17:57:69:9b:ae:e7:be:24:ed: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:99:78:61:E7:44:A2:B6:D1:2C:77:62:D2:F7:51:5E:24:06:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59001b55-5091-483a-a901-52571f4aefb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.248.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:ca:d7:5d:41:80:a1:c7:fb:cf:36:1f:fa:a4:be:98:50:dd: 21:4e:cc:97:72:a1:fa:df:fe:de:fb:df:67:fb:2a:6b:5c:91: 09:42:6b:6c:70:49:79:a9:05:76:b1:d4:5f:e4:e0:62:99:d9: 9b:9f:2f:5e:61:e7:4a:d8:b8:6f:b7:a1:a6:97:8e:77:fc:fc: 61:ac:05:fd:72:50:df:17:18:79:0f:37:72:c0:0f:0c:d9:bf: a9:e7:c4:78:5a:5d:e9:ae:47:7c:75:26:ef:9c:25:24:14:eb: 97:67:30:72:ef:0f:2d:bb:3c:1e:5e:26:1e:c1:dc:61:9a:f2: 01:e4:0f:ce:1d:3d:77:04:20:1e:fa:de:8c:a6:5a:19:71:e5: 93:b2:63:08:35:a7:5a:df:93:4e:30:5e:ea:55:b9:a7:21:32: 4c:03:f1:37:4e:d5:43:04:35:e1:6e:72:fe:a4:6f:3a:a7:cf: 14:78:be:95:7e:ba:fe:86:8f:e4:57:ea:41:66:38:f0:a4:6b: 4a:b6:ce:eb:00:72:09:55:0c:b4:d4:d4:ef:70:ff:7c:91:1a: 8e:7a:15:78:dc:3d:6b:b7:39:94:0e:f3:5a:a9:3a:35:6b:2c: c0:e0:4c:92:2b:b6:c0:03:1f:56:09:33:7d:9e:fe:0b:e0:6d: 01:f6:65:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBWBze6kfpe3Mt15zHqsF4twTHJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgwMzU2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjA0MGExNWZjNjJhZGM1NjM0MWQ4MTE0YzYwYzUyNTcz ZTBiMTI1MTRiNWQ4NDUzZjAwMTczZTgyZTI2ZDgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZhxmcgzW3dtWOpedCUHcR4d2+vaiyfAqV1vLNqktLd6b9 HGYlRFX1neE7G/OwfD5Y/iEyK9b2N8LsM6dBlb5Gs/sWbuYgXJBnfsVbZ7O6eiBu cY+vN7YE6lSRbBfCsPFdoBH1bxfPGU+QNnd5Vp8W3Jf9TcwnDwRD9K1wb2TRcS6A W/DstZpU1KTwWfCvCxxhRGGbiqjo9rk7pjpAOPz1lwjcgc0KcUEiKa7x+Ce21GM8 aq9DWRWJ2enOmv3ztW3FNG2JRMAvkrd08UtiaLOk8IKJyyTSgvtlrM6QXIABvQJo qYKw6diJYYaiAfCH2TLAjGoRcxdXaZuu574k7VN/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjJ6ZeGHnRKK20Sx3YtL3UV4kBngwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5MDAxYjU1LTUwOTEtNDgzYS1hOTAxLTUyNTcxZjRhZWZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7/gwDQYJKoZIhvcNAQELBQADggEBAIvK111BgKHH+882H/qkvphQ3SFO zJdyofrf/t7732f7KmtckQlCa2xwSXmpBXax1F/k4GKZ2ZufL15h50rYuG+3oaaX jnf8/GGsBf1yUN8XGHkPN3LADwzZv6nnxHhaXemuR3x1Ju+cJSQU65dnMHLvDy27 PB5eJh7B3GGa8gHkD84dPXcEIB763oymWhlx5ZOyYwg1p1rfk04wXupVuachMkwD 8TdO1UMENeFucv6kbzqnzxR4vpV+uv6Gj+RX6kFmOPCka0q2zusAcglVDLTU1O9w /3yRGo56FXjcPWu3OZQO81qpOjVrLMDgTJIrtsADH1YJM32e/gvgbQH2ZTU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:47 2025 by rpki-client